Windows Update Orchestrator Service Privilege Escalation

The vulnerability of the Windows Update Orchestrator Service on Windows operating systems is related to the improper handling of symbolic links before accessing the file. Exploiting this vulnerability can allow an attacker to elevate their privileges to the SYSTEM level...

CVE-2026-88968

A flaw was found in Claude Code. An attacker capable of executing code within the tool's sandbox can overwrite arbitrary files outside the designated workspace, leading to a sandbox escape. This issue occurs because the Edit tool verifies file paths without securing them against changes to the...

CVE-2026-121550

A flaw was found in nnn. The application handles its communication path without verifying that an existing target is a legitimate first-in, first-out FIFO special file. A local attacker can exploit this issue by pre-creating the predictable file path as a symbolic link or regular file. This...

colabcat

Colabcat Run Hashcat on Google Colab with session restore capabilities with Google Drive. Usage Go to the link below to open a copy of the colabcat.ipynb file in Google Colab: https://colab.research.google.com/github/someshkar/colabcat/blob/master/colabcat.ipynb Click on Runtime, Change runtime...

CVE-2026-102740

A flaw was found in AsyncHttpClient. Resumable download state is stored in a predictable shared temporary directory with insecure permissions and link-following file operations. A local attacker can exploit this issue by placing a symbolic link in the shared location to overwrite arbitrary files...

SUSE CVE-2026-116250

In server mode pgAdmin 4 validates a path a user gives for a file in their storage directory with checkaccesspermission and then opened it by name. Several places opened it with a plain open or handed the path to a utility that opened it later: the servers.json export and import and the import fi...

SEP-14.2-Arbitrary-Write

CVE-2020-5837 exploit The write up can be found in the blog of the RedyOps Labs: https://labs.redyops.com/index.php/2020/04/27/symantec-endpoint-protection-sep-14-2-eop-via-arbitrary-write/ Third Party Tools This exploit code, is heavily based on symboliclink-testing-tools which was Developed by...

CVE-2023-23946-POC

CVE-2023-23946 POC Exploit Explanation and POC of the CVE-2023-23946 The CVE-2023-23946 vulnerability is caused by a flaw in the way git handles symbolic links. When git creates a symbolic link, it doesnt actually handle it as a symbolic link and because of that we can exploit it to point to file...

CVE-2020-7283-McAfee-Total-Protection-MTP-16.0.R26-EoP

CVE-2020-7283 Exploit The write up can be found in the blog of the RedyOps Labs: https://labs.redyops.com/index.php/2020/07/14/mcafee-total-protection-mtp-16-0-r26-escalation-of-privilege-cve-2020-7283/ Third Party Tools This exploit code, is heavily based on symboliclink-testing-tools which was...

CVE-2026-53694-NoMachine-LPE

CVE-2026-53694: NoMachine Local Privilege Escalation via Argument Injection Overview This repository contains the write-up and Proof of Concept PoC for CVE-2026-53694, a Local Privilege Escalation LPE vulnerability in NoMachine for Linux. Due to improper neutralization of argument delimiters in t...

git_rce

CVE-2024-32002 PoC 1. You must set up the git's symbolic link option like: git config --global core.symlinks true 2. Then exploit CVE-2024-32002 by the following command: git clone --recursive https://github.com/EQSTSeminar/gitrce.git Attack Scenario kali192.168.216.129 --Give remote repository...

CVE-2025-11001

Usage: python3 exploit.py -t "C:\Users\pac\Desktop" -o demo.zip --data-file calc.exe Exploiting 7-zip The vulnerability is only exploitable on windows and has one major caveat.The bug can only be exploited when 7-Zip is ran with Admin privileges for this vulnerability to be succesfully exploited...

CVE-2025-48799

Description This is PoC for CVE-2025-48799, an elevation of privilege vulnerability in Windows Update service. This vulnability affects windows clients win11/win10 with at least 2 hard drives. When machine have multiple hard drives it is possible to change location where new content is saved usin...

CVE-2025-48799

Description This is PoC for CVE-2025-48799, an elevation of privilege vulnerability in Windows Update service. This vulnability affects windows clients win11/win10 with at least 2 hard drives. When machine have multiple hard drives it is possible to change location where new content is saved usin...

CVE-2023-40028

CVE-2023-40028 Exploit This script exploits a vulnerability in Ghost CMS, allowing arbitrary file read through symbolic link abuse. Features Creates a symlink to the target file Compresses the payload into a ZIP file Uploads the ZIP file via the Ghost API Reads the file through an accessible imag...

CVE-2025-31133

CVE-2025-31133 PoC Exploit This document explains the functionality of the provided Proof-of-Concept PoC script for the runc vulnerability CVE-2025-31133. Summary Vulnerability: CVE-2025-31133 - A symbolic link race condition in runc's maskedPaths handling. Impact: A malicious container can bypas...

CVE-2024-38819-POC2

CVE-2024-38819: Proof of Concept PoC This is a proof of concept for the CVE-2024-38819 vulnerability, which I reported, demonstrating a path traversal exploit. Execution Steps 1. Build the Docker image Spring Boot 3.3.4, based on Spring Framework 6.1.13 cd vuln docker build -t cve-2024-38819-poc...

CVE-2024-54910

CVE-2024-54910 https://vulners.com/cve/CVE-2024-54910 This document explores a vulnerability that allows arbitrary file writes, leading to privilege escalation on a Windows System that has Hasleo Backup Suite Free = 4.9.4 installed. It demonstrates how backup recovery operations, combined with...

CVE-2023-51127

CVE-2023-51127 FLIR AX8 thermal sensor cameras up to and including 1.46.16 are vulnerable to Directory Traversal due to improper access restriction. This vulnerability allows an unauthenticated, remote attacker to obtain arbitrary sensitive file contents by uploading a specially crafted symbolic...

7Ziprowler

7-ZiProwler CVE-2025-11001 Overview Result of my quick research on CVE-2025-11001 are presented in this repo. Exploit is written in python and astral uv project manager. References Some: NIST ZDI CVE News WIZ Quick analysis I will not dig too deep into technical details of this security flaw. If...